From e2bc3dd1618405a67e9b412f8ef67eb84141eb76 Mon Sep 17 00:00:00 2001 From: chenhang Date: Thu, 29 Sep 2022 16:36:01 +0200 Subject: ZOOKEEPER-4616: Upgrade docker image to resolve CVEs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The current docker image `maven:3.6.3-jdk-8` has many critical security issues. maven3.6.3-jdk-8 › dpkg1.19.7 has [CVE-2022-1664](https://www.cve.org/CVERecord?id=CVE-2022-1664) maven3.6.3-jdk-8 › openssl1.1.1d-0+deb10u6 has [CVE-2021-3711](https://www.cve.org/CVERecord?id=CVE-2021-3711) maven3.6.3-jdk-8 › gzip1.9-3 has [CVE-2022-1271](https://www.cve.org/CVERecord?id=CVE-2022-1271) We need to upgrade the docker base image to version `maven:3.8.4-jdk-8` See [ZOOKEEPER-4616](https://issues.apache.org/jira/browse/ZOOKEEPER-4616) for full details. Author: chenhang Reviewers: Enrico Olivelli Closes #1927 from hangc0276/chenhang/ZOOKEEPER-4616 --- dev/docker/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dev/docker/Dockerfile b/dev/docker/Dockerfile index bd2977f74..a1b33569e 100644 --- a/dev/docker/Dockerfile +++ b/dev/docker/Dockerfile @@ -17,7 +17,7 @@ # under the License. # -FROM maven:3.6.3-jdk-8 +FROM maven:3.8.4-jdk-8 RUN apt-get update RUN apt-get install -y \ -- cgit v1.2.1